CVE-2025-22086 is a vulnerability in the Linux kernel's RDMA mlx5 driver where an incorrect comparison of queue pair (QP) numbers can lead to using the wrong QP when handling completion queue entries (CQEs). This flaw can cause a kernel NULL pointer dereference and a kernel crash (Oops). The issue arises because the QP number from the firmware (FW) is incorrectly compared against a software QP number, leading to invalid memory access.